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DETAILED ACTION 

This action is in response to the papers filed 12/10/2007. 

Response to Arguments 
Applicant's arguments have been considered but are moot in view of the new ground(s) 
of rejection. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the mention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-4, 14-17, 19, 21, 22, 24, 25, 27, 28, 30-34 are rejected under 35 U.S.C. 103(a) 
as being unpatentable over Warren (U.S. 6,430,727) in view Goffin (WO 01/61437). With 
respect to claim 1, a semiconductor integrated circuit arranged to execute application code to be 
received from a memory via external connections, comprising: a processor (see Warren column 2 
line 24-47 i.e. CPU) to execute the application code from the memory (see Warren column 2 line 
24-47 i.e. memory); an internal bus (see Warren column 2 line 24-47 i.e. bus) to provide the 
application code to the processor from the memory (see Warren column 2 line 24-47); and an 
instruction monitor to monitor code requests issued by the processor and to impair the function 
of the circuit unless addresses of the code requests fall within a given range (see Warren abstract 
and column 2 line 24-47). 
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Warren does not teach a verifier processor arranged to receive the application code via 
the internal bus, wherein the verifier processor is arranged to continually process the application 
code using a verification function whilst the processor executes from the memory and to impair 
the function of the integrated circuit in the event that the application code does not satisfy the 
verification function. Goffin teach a verifier processor (security processor 102) arranged to 
receive the application code via the internal bus (memory bus 105), wherein the verifier 
processor is arranged to continually process the application code using a verification function 
while the processor (master processor 101) executes from the memory and to impair the function 
of the integrated circuit in the event that the application code does not satisfy the verification 
function (see page 10 line 26 - page 13 line 25). 

It would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have a separate processor for 
verifying code to increase the security of the system (see page 10 line 26 - page 13 line 25). 
Therefore one would have been motivated to have a verifier processor. 

With respect to claim 2, wherein the given range is stored in an internal memory (see 
Warren column 2 line 48-54). 

With respect to claim 3, wherein the given range is derived by the verifier processor 
during a first check of the memory (see Warren column 2 line 24-60). 

With respect to claim 4, wherein the application code in memory comprises a linked list 
and wherein the given range comprises a table of linked list addresses (see Warren column 2 line 
24-60). 
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With respect to claim 14, wherein the verifier processor is to request portions of the 
application code from the flash memory at intervals between requests by the processor for 
portions of the application code (see Warren column 2 line 24-60). 

With respect to claim 15, wherein the verifier processor is to request portions of the 
application code at less frequent intervals than the processor (see Warren column 2 line 24-60). 

With respect to claim 16, wherein the verifier processor is to request portions of the 
application code at pseudo random times (see Warren column 2 line 24-60). 

With respect to claim 17, wherein the verifier processor is to carry out read requests at a 
faster rate during a first check than in subsequent checks (see Warren column 2 line 24-60). 

With respect to claims 19 and 25, a semiconductor integrated circuit arranged to execute 
application code received from an external memory via an external connection, comprising: a 
processor (see Warren column 2 line 24-47 i.e. CPU) to execute the application code from the 
memory (see Warren column 2 line 24-47 i.e. memory); an internal bus (see Warren column 2 
line 24-47 i.e. bus) connected to the processor to provide the application code to the processor 
from the memory (see Warren column 2 line 24-47); and an instruction monitor to be connected 
to the internal bus to monitor code requests issued by the processor and to impair the function of 
the circuit unless the address of the code falls within a given range (see Warren column 2 line 
24-47). 

Warren does not teach a verifier processor arranged to receive the application code via 
the internal bus, wherein the verifier processor is arranged to continually process the application 
code using a verification function whilst the processor executes from the memory and to impair 
the function of the integrated circuit in the event that the application code does not satisfy the 
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verification function. Goffin teach a verifier processor (security processor 102) arranged to 
receive the application code via the internal bus (memory bus 105), wherein the verifier 
processor is arranged to continually process the application code using a verification function 
while the processor (master processor 101) executes from the memory and to impair the function 
of the integrated circuit in the event that the application code does not satisfy the verification 
function (see page 10 line 26 - page 13 line 25). 

It would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have a separate processor for 
verifying code to increase the security of the system (see page 10 line 26 - page 13 line 25). 
Therefore one would have been motivated to have a verifier processor. 

With respect to claims 21 and 27, wherein the given range is derived by the verifier 
processor during a check of the memory (see Warren column 2 line 24-54). 

With respect to claims 22 and 28, wherein the application code in memory comprises a 
linked list and wherein the given range is stored in a table of linked list addresses (see Warren 
column 2 line 24-54). 

With respect to claims 24 and 30, wherein the verification processor includes: an internal 
processor (see Warren column 2 line 24-47 i.e. CPU) that coordinates the processing of the 
application using the verification function and impairs the execution of the integrated circuit if 
the application code does not satisfy the verification function (see Warren column 2 line 24-54); 
a code memory, coupled to the internal processor (see Warren column 2 line 24-47 i.e. CPU); 
and an interface circuit that connects the internal processor with the internal bus (see Warren 
column 2 line 24-47 i.e. bus). 
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With respect to claim 3 1, a method for executing application code received from an 
external memory via external connections, the method comprising: executing application code 
from the external memory (see Goffin figure 1 External data line 106) with a processor (see 
Goffin figure 1 Master Processor 101 and page 10 line 3 - page 13 line 25); providing the 
application code to the processor via an internal bus (see Goffin page 10 line 3 - page 13 line 
25); providing the application code to a verifier processor via the internal bus (see Goffin figure 
1 Secure Processor 102 and page 10 line 3 - page 13 line 25); continually processing the 
application code with the verifier processor, while the processor executes the application code 
independently of the verifier processor, using a verification function (see Goffin page 10 line 3 - 
page 13 line 25); monitoring code requests issued by the processor with an instruction monitor 
(see Goffin page 10 line 3 - page 13 line 25); and impairing operation of the integrated circuit if 
the application code does not satisfy the verification function or if addresses of the code requests 
fall outside a given range (see Goffin page 10 line 3 - page 13 line 25). 

With respect to claim 32, further comprising deriving the given range with the verifier 
processor during a check of the external memory (see Warren column 2 line 24-60). 

With respect to claim 33, further comprising storing the given range in an internal 
memory (see Warren abstract and column 2 line 24-47). 

With respect to claim 34, further comprising: receiving pause and stop requests at the 
verifier processor; and configuring the verifier processor so that any pause and stop request is 
ineffective during a first check of the code (see Warren column 2 line 24-60). 
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Claims 10-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over Warren 
(U.S. 6,430,727) in view Goffin (WO 01/61437) in further view of Morais (U.S. 2003/0229777). 
Warren and Goffin teach everthing with respect to claim 1 above but with respect to claim 10 
they do not teach wherein the verification function includes a hash function on the application 
code. Morais teaches wherein the verification function includes a hash function on the 
application code (see Morais figure 4 and paragraph 0034-0039 i.e. The comparison is made in a 
decision step 256 to determine if the stored hash value is equal to the actual hash value that was 
determined. If not, the machine instructions in bootstrap code implement a step 258, which stops 
the boot-up process of game console). 

It would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have included a hash function on 
the application code to compared to a stored hash value that is maintained in a circuit component 
of the electronic device, separate from the memory where the code is stored, to verify that the 
predefined portion of the code is authorized. If the first hash value equals the stored hash value, 
execution of the predefined portion of the code is enabled, and if not, the boot-up of the 
electronic device is terminated (see paragraph 0009). Therefore one would have been motivated 
to have included a hash function on the application code 

With respect to claim 1 1, wherein the verifier processor is arranged to receive a stored 
secret from the memory and the verification function is a comparison of the secret and the 
processed application code (see Morais figure 4 and paragraph 0034-0039 i.e. The comparison is 
made in a decision step 256 to determine if the stored hash value is equal to the actual hash value 
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that was determined. If not, the machine instructions in bootstrap code implement a step 258, 
which stops the boot-up process of game console). 

With respect to claim 12, wherein the verification function comprises hashing the 
application code to produce hashed code, retrieving a signature of the code from a signature store 
within the memory and verifying the hashed code and signature using a public key (see Morais 
figure 4 step 266). 

Claims 5-9, 13, 18, 23 and 29 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Warren (U.S. 6,430,727) in view Goffin (WO 01/61437) of Harding et al (U.S. 
2003/0005277). Warren and GofFin teaches everything with respect to claim 4 above but with 
respect to claim 5, they does not teaches wherein the verifier processor is arranged to impair the 
function of the integrated circuit if the verification function is not completed for one complete 
cycle of the linked list within a predetermined time (see Harding paragraph 0016). It would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains to have a timer to make sure the BIOS has finished in a certain 
amount of time to make sure that the BIOS is going as planned (see Harding paragraph 0016). 
Therefore one would have been motivated to have included a timer. 

With respect to claim 6, wherein the verifier processor is arranged to receive pause and 
stop requests and is configured so that any pause and stop request is ineffective during a first 
check of the code (see Harding paragraph 0016). 

With respect to claim 7, wherein the verifier processor can only be paused for a 
predetermined time (see Harding paragraph 0016). 
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With respect to claim 8, wherein if the application codes does not satisfy the verification 
function, a reset signal is asserted after a predetermined time (see Harding paragraph 0016 i.e. 
this may restart the validation). 

With respect to claim 9, wherein a status signal is set and stored to indicate that the code 
does not satisfy the verification function before the reset is asserted (see Harding paragraph 0016 
0018 and 0020). 

With respect to claim 13, wherein the verifier processor has a stop input and is arranged 
to restart a given time period after a stop, and arranged not to stop again until completing the 
verification function on the code at least once (see Harding paragraph 0016). 

With respect to claim 18, wherein impairing the function of the integrated circuit 
comprises resetting the circuit (see Harding paragraph 0016 i.e. this may restart the validation). 

With respect to claims 23 and 29, wherein the verification processor is structured to 
impair the execution of the circuit by asserting a reset signal to the processor if the application 
codes does not satisfy the verification function (see Morais paragraph 0034-0039) within a 
predetermined time (see Harding paragraph 0016). 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is 571-270- 
1018. The examiner can normally be reached on Monday-Thursday from 7:30 A.M. to 
5:00 P.M. The examiner can also be reached on alternate Fridays from 7:30 A.M. to 
4:00 P.M. 



Application/Control Number: 



Page 10 



10/817,148 
Art Unit: 2132 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron, can be reached on 571-272-3799. The fax phone number for the 



Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-2 1 7-9 1 97 (toll-free). 



organization where this application or proceeding is assigned is 571-273-8300. 



Devin Almeida 
Patent Examiner 
2/4/2008 
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